chat
expand_more

An Abnormal Commitment to Security and Privacy

Customers place tremendous trust in Abnormal to protect them from the full spectrum of attacks when they provide us access to the email stored in Microsoft 365 or Google Workspace. To that end, we’re focused on protecting your data and building your trust.
December 17, 2021

Customers place tremendous trust in Abnormal to protect them from the full spectrum of attacks when they provide us access to the email stored in Microsoft 365 or Google Workspace. To that end, we’re focused on protecting your data and building your trust. This post describes our latest product security enhancements and our relentless commitment to protecting customer data.

We diligently follow key privacy and data protection principles for data minimization and processing purpose limitations, and maintain security, integrity, and confidentiality to ensure customer data is appropriately protected in alignment with global privacy frameworks. We also use industry-standard software development lifecycle processes to ensure all production code is fully peer-reviewed and deployed via approved methods.

Refined Portal Session Timeout Security

As part of our December 2021 product security enhancements, we have changed the Abnormal portal session timeout logic to automatically sign out a user after 60 minutes of inactivity, with a maximum user session length of one day. If desired, each customer can request custom timeout intervals that better conform with their own security policies, such as setting the timeout value to 15 minutes. As a result, customers benefit from increased security measures and uninterrupted sessions.

It is recommended wherever possible to use multi-factor authentication (MFA) as one of the most effective deterrents for preventing account takeover attacks. We support Okta for both SSO and MFA.

Comprehensive Role-Based Access Controls (RBAC)

Our newly expanded role-based access controls functionality enables customers to restrict access to specific tenants and administrative functions based on the user’s assigned roles and permissions. The expansive range of roles combined with per-product permissioning ensures more control while maintaining usability and ease of use.

Restricting product access to users by role

Granular product permissions within the Abnormal portal.

The additional enterprise-grade granular permissions, particularly for obscuring message bodies and per tenant permissions, sets the foundation for granular permissioning and will support new product features added in the future.

Setting product access permissions by individual role

Individual role, per tenant, and per product permissions in the Abnormal portal.

This further enhances security, privacy, and compliance, proving extremely valuable for larger enterprise customers with users in different divisions, departments, or teams across diverse geographies.

Abnormal's Commitment to Security and Privacy

The protection of our customer’s data is of paramount importance. To demonstrate the design and effectiveness of our security controls within our environment, an independent third-party audit is conducted annually, and Abnormal maintains a SOC 2 Type 2 report due to this regular audit activity. Upon request, we can share security framework reports and security control responses with external entities under a non-disclosure agreement (NDA).

As of December 21, 2021, Abnormal adheres to the following privacy regulations and compliance certifications:

Compliance

Privacy Regulations

Amazing products and lasting partnerships are built on trust and transparency. Abnormal is committed to providing secure products that protect your data and build your trust.

Not yet an Abnormal customer? Request a demo today to learn how Abnormal can enhance your email security capabilities and provide visibility into email threats that other solutions miss.

An Abnormal Commitment to Security and Privacy

See Abnormal in Action

Get a Demo

Get the Latest Email Security Insights

Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.

 

See the Abnormal Solution to the Email Security Problem

Protect your organization from the full spectrum of email attacks with Abnormal.

 
Integrates Insights Reporting 09 08 22

Related Posts

B Earn Your CPE Credits with Abnormal
Earn your continuing education credits with ISC2 by viewing cybersecurity content from Abnormal Security.
Read More
B Seg Lessons
Discover key insights gleaned from replacing 100+ SEGs for Abnormal customers.
Read More
B Europe Attack Data Blog
Discover what our research uncovered about the European threat landscape and attack trends for organizations in the region.
Read More
B SAT
Abnormal aims to provide superior detection of email attacks while also directly and indirectly influencing the security awareness of your employees.
Read More
B 6 3 24 BEC Attacks
Discover how cybercriminals obtain corporate data from brokers like ZoomInfo and Apollo to enable targeted business email compromise (BEC) attacks.
Read More
B Addressing Account Takeovers Blog
Discover how security leaders are protecting their organizations against account takeover with insights from our survey of 300 cybersecurity stakeholders.
Read More